CLAIM AMENDMENTS 



Claim Amendment Summary 
Claims pending 

• Before this Amendment: Claims 1-27, 29, 31-33 and 35-44. 

• After this Amendment: Claims 1-21, 24-27, 29, 31-33 and 35-47. 
Non-Elected, Canceled, or Withdrawn claims: Claims 22 and 23. 
Amended claims: Claims 1, 17-19 and 33. 

New claims: Claims 45-47. 
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Claims: 



1. (Currently Amended) A method comprising: 

enumerating local credentials and remote credentials in response to 
receiving an event notification, wherein the event notification is at least one of 
the following: 

a session event; 

a logon event; 

a logout event; 

a lock event: and 

an unlock event; 

a timer event; 

a po l icy app l ication event; and 
synchronizing the local credentials and remote credentials. 

2. (Original) The method of claim 1, wherein synchronizing the local 
credentials and the remote credentials is based on at least one time-stamp 
associated with the local credentials and at least one time-stamp associated with 
the remote credentials. 



Serial No.: 10/821,603 

Atty Docket No.: MS1-1973US 

Atty/Agent: Jason F. Lindh 



3. (Original) The method of claim 1, wherein synchronizing the local 
credentials and the remote credentials is based on a comparison of hash values. 

4. (Original) The method of claim 1, wherein synchronizing includes 
error handling. 

5. (Original) The method of claim 1, wherein synchronizing includes 
writing at least one of the local credentials to a remote credential cache. 

6. (Original) The method of claim 1, wherein synchronizing includes 
writing at least one of the remote credentials to a local credential cache. 

7. (Original) The method of claim 1, wherein synchronizing includes 
deleting at least one of the local credentials from a local credential cache. 

8. (Original) The method of claim 1, wherein synchronizing includes 
deleting at least one of the remote credentials from a remote credential cache. 

9. (Original) The method of claim 1, wherein synchronizing includes 
modifying at least one of the local credentials at a local credential cache based 
on at least one of the remote credentials. 
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10. (Original) The method of claim 1, wherein synchronizing includes 
modifying at least one of the remote credentials at a remote credential cache 
based on at least one of the local credentials. 

11. (Original) The method of claim 1, further comprising updating a 
list of local credentials. 

12. (Original) The method of claim 1, further comprising updating a 
list of remote credentials. 

13. (Original) The method of claim 1, further comprising determining 
a state of the remote credentials dynamically. 

14. (Original) The method of claim 1, further comprising maintaining 
a state file for the remote credentials. 

15. (Original) The method of claim 1, further comprising maintaining 
a state file for the local credentials. 

16. (Original) The method of claim 1, further comprising resolving a 
conflict of state between the local credentials and the remote credentials. 
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17. (Currently Amended) A computer readable storage media 
encoded with a computer program for executing on a computer system a 
computer process, the computer process comprising: 

enumerating local credentials and remote credentials in response to 
receiving an event notification, wherein the event notification comprises is-at 
l east one of the fo ll owing: 

a session event; 

a logon event; 

a l ogout event; 

a l ock event; 

on un l ock event; 

a timer event; 

a po l icy app l ication event; and 
synchronizing the local credentials and remote credentials via a 
synchronizing module, wherein the synchronizing module: 

sorts the local credentials and the remote credentials into a local 
credential array and a remote credential array respectively and linearly 
compares the local credential array and the remote credential array; and 
stores a state file for conflict resolution, the state file comprising: 
a file version; 
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a flag, wherein the flag indicates whether the credential is 
user-protected; and 

a credential state, wherein the credential state comprises: 
last time synchronization module called; 
last time local store changed; and 
last time remote cache changed; 
removing at least one of the local credentials from a first local credential 
cache, wherein the credential removed from the first local credential cache is 
identified and tagged by the synchronization module in a remote credential 
cache; and 

removing the tagged credential from a second local credential cache 
without rewriting the tagged credential to the remote credential cache . 

18. (Currently Amended) The computer program product computer 
readable storage media of claim 17 wherein the computer process further 
comprises synchronizing the local credentials and the remote credentials is based 
on at least one time-stamp associated with the local credentials and at least one 
time-stamp associated with the remote credentials. 



19. (Currently Amended) The computer program product computer 



readable storage media of claim 17 wherein the computer process further 
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comprises synchronizing the local credentials and the remote credentials is based 
on a comparison of hash values. 

20. (Previously Presented) The computer readable storage 
media of claim 17 wherein the computer process further comprises writing at 
least one of the local credentials to a remote credential cache. 

21. (Previously Presented) The computer readable storage 
media of claim 17 wherein the computer process further comprises writing at 
least one of the remote credentials to a local credential cache. 

22. (Previously Presented) The computer readable storage 
media of claim 17 wherein the computer process further comprises removing at 
least one of the local credentials from a local credential cache. 

23. (Previously Presented) The computer readable storage 
media of claim 17 wherein the computer process further comprises removing at 
least one of the remote credentials from a remote credential cache. 



Serial No.: 10/821,603 

Atty Docket No.: MS1-1973US 

Atty/Agent: Jason F. Lindh 



24. (Previously Presented) The computer readable storage 
media of claim 17 wherein the computer process further comprises modifying at 
least one of the local credentials at a local credential cache. 

25. (Previously Presented) The computer readable storage 
media of claim 17 wherein the computer process further comprises modifying at 
least one of the remote credentials at a remote credential cache. 

26. (Previously Presented) The computer readable storage 
media of claim 17 wherein the computer process further comprises updating the 
array of local credentials. 

27. (Previously Presented) The computer readable storage 
media of claim 17 wherein the computer process further comprises updating the 
array of remote credentials. 

28. (Canceled) 

29. (Previously Presented) The computer readable storage 
media of claim 17 wherein the computer process further comprises determining a 
state of the remote credentials dynamically. 
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30. (Canceled) 



31. (Previously Presented) The computer readable storage 
media of claim 17 wherein the computer process further comprises error 
handling. 

32. (Previously Presented) The computer readable storage 
media of claim 17 wherein the computer process further comprises resolving a 
conflict of state between the local credentials and the remote credentials. 
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33. (Currently Amended) A system comprising: 
an event handler to receive event notifications; and 
a synchronizing module operatively associated with the event handler to 
synchronize local credentials and remote credentials when the event handler 
receives an event notification and if the local and remote credentials are different 
from one another, wherein the event notification is at least one of the following: 
a session event; 
a logon event; 
a logout event; 
a lock event: and 
an unlock event; 
a timer event; 
a po l icy app l ication event . 



34. (Canceled) 



35. (Original) The system of claim 33, wherein the credentials include 
at least one of the following: an encryption credential, a token, an asymmetric 
key pair, a symmetric key, a digital certificate, an XrML license, an authentication 
credential, an authorization credential. 
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36. (Original) The system of claim 33, further comprising a local store 
manager to enumerate the local credentials for the synchronizing module. 

37. (Original) The system of claim 33, further comprising a remote 
store manager to enumerate the remote credentials for the synchronizing 
module. 

38. (Original) The system of claim 33, wherein the local credentials 
are stored in a local cache. 

39. (Original) The system of claim 33, wherein the local credentials 
are stored in a local cache provided at any number (n) of clients. 

40. (Original) The system of claim 33, wherein the local credentials 
are encrypted using a master key. 

41. (Original) The system of claim 33, wherein the remote credentials 
are stored in a remote cache. 

42. (Original) The system of claim 33, wherein the local credentials 
are stored in a remote cache provided at any number (n) of hosts. 
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43. (Original) The system of claim 33, wherein the remote credentials 
are maintained by a remote directory service. 

44. (Original) The system of claim 33, wherein the remote credentials 
are encrypted. 

45. (New) The computer readable storage media of claim 17 
wherein the event notification comprises a logout event. 

46. (New) The computer readable storage media of claim 17 
wherein the event notification comprises a lock event. 

47. (New) The computer readable storage media of claim 17 
wherein the event notification comprises an unlock event. 
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